Privacy Policy

Last updated: [2026-08-26]

1. Data controller

The TopbisGo mobile application is published by:

• Company name: ADIPCO
• Legal form: Ets
• Registered office: Yaoundé, Cameroon
• Telephone: +237 6 55 96 66 35
• Data protection contact: info@topbisgo.com

We are the controller of the personal data described in this policy.

2. The data we process

2.1 Account data. When you sign up: your display name, your e-mail address or login phone number, your password (stored in hashed form, never in clear text). If you sign up via Google or Apple, we receive from those services your identifier, your name and your e-mail address. In guest mode, an anonymous technical identity is created to make the Service work; it contains no identifying data and is converted into a full account if you sign up.

2.2 Public profile. Your display name, your profile photo (optional), your city and your aggregated ratings are visible to other users.

2.3 Seller phone number. Before your first listing is published, we collect a Cameroonian mobile number. This number is never shown to buyers or to any other user; it is visible only to you and to our authorized teams.

2.4 Listings and content. The listings you publish (title, description, price, category, condition, photos) and the quartier (neighbourhood) they are attached to. Optionally, you may also attach a public landmark (market, junction, school…) chosen from a curated reference list, to indicate the area of your listing. A landmark is public reference data, never your position or address: buyers see "near" the landmark, never "at" it, and no seller-derived location (GPS fix, address, free-text place or map pin) ever exists in the Service. Listings and profiles never carry GPS coordinates: their location is limited to the quartier level, optionally refined by a public landmark, by design.

2.5 Device position. If you grant the location permission, the Application reads your device's position and transmits it temporarily to our servers to compute distances and rank the home feed and search results by proximity. This position is neither stored as a precise position, nor attached to your profile or your listings, nor visible to other users. If you refuse the permission, the Service works on the basis of the city and quartier you choose. When distances are shown or used for ranking, they are measured to the listing's public landmark when one is attached, and otherwise to the centre of its quartier; the Application indicates which of the two was used. Distances are never measured to a seller's position, which the Service does not know.

2.6 Messages. The content of your conversations in the built-in messaging, needed to deliver and display your messages.

2.7 In-app activity. Your favorites, the sellers you follow, your saved searches, your reports, your blocks and your notifications.

2.8 Agent code. If you enter one at sign-up, the code of the field enrollment agent, recorded as entered and attached to your account.

2.9 Technical data. The device token needed for push notifications (if you enable them), your chosen language, and server-side technical security logs.

2.10 Optional data, off by default. Usage statistics ("analytics") and crash reports are disabled by default and are only collected if you enable them in "Privacy & data". You can disable them at any time; disabling immediately stops any future sending.

2.11 What we do not do. We collect no payment data (the Service includes no payment facility) and none of your address book contacts; we never store or display your precise GPS position; we do not sell your data.

2.12 Geographic reference data. The lists of quartiers and public landmarks offered in the Application are curated reference data and contain no user data. This data is derived from OpenStreetMap — location data © OpenStreetMap contributors — and is available under the Open Database License (ODbL, share-alike).

3. Automated decisions and moderation

Listing photos undergo automated analysis (detection of inappropriate content) which may place a listing on hold; in that case, the decision to publish or reject is made by human review. No decision producing significant effects on you is taken in an exclusively automated manner without the possibility of human intervention. You may contest any moderation decision under the conditions set out in our Terms of Service (article 10.3).

When you report content, reported content — including messages — may be reviewed by authorized TopbisGo moderators to investigate abuse and enforce platform rules. Moderation decisions are recorded in an internal audit log.

4. Legal bases

In accordance with Law No. 2024/017 of 23 December 2024 on the protection of personal data in Cameroon, the processing of your data rests primarily on your prior, free, informed, specific and unambiguous consent (art. 9), collected when you create your account (acceptance of the Terms and of this policy, whose version is presented to you) and, for optional processing, through the dedicated switches in "Privacy & data". You may withdraw your consent at any time (see § 10).

* Qualification to be confirmed by legal counsel in light of arts. 9, 19 and 21 of Law No. 2024/017 and their exceptions.

5. Recipients and processors

We do not sell your personal data. It is only shared in the following cases:

5.1 With other users. Your public profile (display name, photo, city, ratings) and your live listings are visible to everyone. Your messages are visible only to the participants in the conversation.

5.2 With the authorities, where Cameroonian law requires it (judicial requisition, legal obligation), within the limits of what is required.

6. International transfers

The data are stored outside Cameroon (notably in the United States and in EU). In accordance with article 32 of Law No. 2024/017, these transfers are subject to safeguards and, where applicable, to the prior authorization of the Cameroonian personal data protection authority.

7. Retention periods

• Account data and content: kept for as long as your account is active, then deleted under the conditions of § 8.
• Data exports: each export ceases to be accessible 7 days after it is prepared, and is then deleted. The download link shown in the Application expires after 10 minutes; the link sent by e-mail expires after 24 hours.
• Device position: temporary transmission only (§ 2.5), no retention as a precise position.
• Technical security logs: 30 days.
• Usage statistics and crash reports (if enabled): kept according to the retention periods of the providers concerned 30 days; deletion on request (§ 10).

8. Deleting your account

You may delete your account at any time from "Privacy & data". Deletion is permanent and has the following effects:

• your profile, your login identifiers (e-mail, phone number, Google/Apple identities), your photos, your device tokens and your saved location data are deleted;
• your listings are removed;
• your messages remain visible to the other participant of each conversation, but appear as sent by "Deleted user";
• the ratings you left become anonymous, so that sellers' reputation averages remain accurate.

If a technical incident delays the deletion of certain storage files (photos), it is completed as soon as possible after detection.

9. Security and data breaches

We apply appropriate technical and organizational measures: encryption of communications (TLS), passwords stored in hashed form, row-level access control on the database, admin access protected by two-factor authentication (2FA), an audit log of moderation actions, and a minimization principle (for example, internal moderation data is never synchronized to devices).

10. Your rights

In accordance with Law No. 2024/017 (in particular its articles 21 and 37 to 46), you have the following rights:

• Access to your data, including information about its origin and its recipients;
• Rectification of inaccurate data;
• Erasure of your data;
• Restriction of processing in the cases provided for by law;
• Objection to processing, including to the disclosure of your data to third parties;
• Withdrawal of consent at any time, without retroactive effect;
• Portability: receiving your data in a structured, commonly used format and, where technically possible, having it transmitted directly to another controller;
• Automated decisions: not being subject to a decision producing significant effects based exclusively on automated processing, and obtaining human intervention (see § 3);
• Post-mortem directives: setting directives on what happens to your data after your death;

Directly in the Application ("Privacy & data"): export your data in JSON format, delete your account, enable or withdraw your consent to statistics and crash reports, and edit your profile. For any other request — including the deletion of data held by our statistics and diagnostics providers — write to us at info@topbisgo.com. We will respond within the time limits provided by law.

11. Minors

The Service is reserved for persons aged at least 18. In accordance with the law, the processing of data of a minor under 18 requires the consent of a parent or legal representative; we do not knowingly collect data from minors without that consent. If you believe a minor is using the Service, contact us at info@topbisgo.com.

12. Changes to this policy

Each published version bears a version number visible at the top of the page in the Application; earlier versions are archived and can be provided on request. In the event of a substantial change, we will inform you before it enters into force by an appropriate means (in-app notification or e-mail) and, where the law requires it, we will collect your consent again.

13. Contact

• E-mail (data protection): info@topbisgo.com
• Address: ADIPCO Ets, Yaoundé, Cameroon
• Telephone: +237 6 55 96 66 35